[32926] in bugtraq
Multicast from Orinoco wireless stations
daemon@ATHENA.MIT.EDU (Andrew Daviel)
Sat Dec 20 15:45:42 2003
Date: Sat, 20 Dec 2003 09:59:53 -0800 (PST)
From: Andrew Daviel <advax@triumf.ca>
To: BUGTRAQ@securityfocus.com
Message-ID: <Pine.LNX.4.53.0312200949460.7492@andrew.triumf.ca>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
It seems that some Orinoco 802.11 base stations
send multicast packets on 224.0.1.76/2313 (IAPP.MCAST.NET).
By sending a multicast join (opening a socket with netcat or other tool)
to this group, one can discover other base stations on multicast-enabled
portions of the Internet, such as the academic networks CA*net, ESnet etc.
There is administrative access to these units via telnet and http.
The group should probably be filtered at an administrative boundary as a
matter of principle.
--
Andrew Daviel, TRIUMF, Canada
Tel. +1 (604) 222-7376
security@triumf.ca
